Just when the year was winding down, and everyone was already planning New Year get-togethers, Romania’s national water authority found itself the latest target in a growing global wave of cyberattacks, reminding everyone that even the most essential services aren’t immune to digital threats. Over the weekend, a ransomware attack struck Administrația Națională Apele Române (ANAR), the country’s official water management agency, locking up nearly 1,000 computer systems and freezing key internal networks.
For the team at Romanian Waters, Monday morning didn’t start with the usual hum of computers and emails. Instead, staff arrived to find screens locked and familiar files scrambled beyond recognition. Servers that help manage everything from geographic mapping systems to email platforms were encrypted. A ransom note, the cold, digital equivalent of a bank robber’s demand, instructed officials to make contact within seven days if they wanted their data restored.
Yet, amid the technical chaos, there was an important silver lining. The systems that literally keep the water flowing, the operational technologies controlling dams, flood defenses, and drinking-water supplies, were untouched by the malware. Hydrotechnical teams seamlessly switched to old-fashioned tools like radios and telephones, ensuring that tap water still ran and safety systems remained in place for communities across the country.
For ordinary Romanians, the sight of offline email servers and inaccessible internal apps might seem remote from everyday life, until a moment like this makes it clear how deeply digital systems are woven into public services. “It’s strange,” one local official said, “You think about water as something physical, but now you see how much of it depends on computers you never see.”
National cybersecurity teams, including Romania’s National Cyber Security Directorate and the Romanian Intelligence Service, have launched urgent investigations. Their mission is two-fold, to restore IT systems and prevent future incursions, all while advising strongly not to negotiate with cyber extortionists.
As the world becomes more connected, incidents like this highlight a growing reality, critical infrastructure can’t just be strong in pipes and pumps, it must also be strong in code and cybersecurity.
Caught feelings for cybersecurity? It’s okay, it happens. Follow us on LinkedIn and Instagram to keep the spark alive.
